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DETAILED ACTION 

1 . This office action is in response to Applicant's amendment filed on May 3, 2005. 
Claims 15 and 21 have been cancelled; claims 7 and 17 have been amended; claims 
23-24 are added. Claims 1-14, 16-20 and 22-24 are pending. 

2. Claim 14, which is under cancelled in the remarks submitted on May 3, 2005, 
should be changed to claim 15. 

Claim Rejections - 35 USC § 101 

3. In view of the terminal disclaimer filed on May 3, 2005, the Examiner withdraws 
the double patenting rejections of claims 1-22. 

Response to Arguments 

4. Applicant's arguments, see Remarks, filed May 3, 2005, with respect to the 
rejection(s) of claim(s) 1-14 and 16-22 have been considered but are not persuasive. In 
response to the arguments concerning the previously rejected claims, the following 
comments are made: 

Applicant argues that the cited prior art, Bialick et al. (hereinafter Bialick) does 
not teach the limitation using biometric authentication to restrict access to information 
stored in the device itself. The Examiner disagrees with the applicant. Bialick discloses 
using a biometric authentication method to a host-computing device before allowing 
access to particular data stored on the computing device. (Col. 14, lines 50-52) 
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Therefore, it is respectfully asserted that biometric authentication method used to 
restrict access to data stored on a computing device is similar to the one presented by 
the applicant. The Applicant argues Bialick does not teach or suggest a bypass 
mechanism. The Examiner disagrees although Bialick does not explicitly disclose 
bypass mechanism; he teaches the device can be implemented in order to enable the 
user to enter an acceptable access code such as password or PIN before allowing 
access. (Col. 10, lines 45-47) It would have been obvious to use the password or PIN to 
allow access in case of failure of the biometric-based authentication, because as 
suggested by Bialick the system can be set up in order to authenticate the user using 
biometric or password or PIN to have a layer of security that protects the integrity of the 
restricted resources. The Applicant argues Bialick does not teach or suggest encrypting 
and storing the biometrics marker. The Examiner disagrees although Bialick does not 
explicitly disclose encrypting the biometrics marker, he teaches encrypting and 
decrypting data stored on the host-computing device. (Col. 12, lines 12-13) It would 
have been obvious to encrypt and store the biometrics marker in order to protect the 
biometric data from being compromised. Furthermore, it is well known in the art to store 
passwords and other authentication information in an encrypted format. 

Regarding claims 3 and 9, the Applicant argues Bjorn does not teach or disclose 
a universal serial bus (USB) connector for coupling with another USB-compliant device. 
Bjorn teaches a device with a digital connection, a bus that conforms to a universal 
serial bus (USB). (Col. 2, lines 59-60). Bjorn further the USB is used to receive digitized 
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image that is another USB-compliant device. Therefore, Bjorn clearly anticipates the 
claimed USB connector for coupling another USB-compliant device. 
Therefore, all the rejections are maintained. 

Claim Rejections - 35 USC § 102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21 (2) 
of such treaty in the English language. 

6. Claims 1 , 2, 4, 5, 7, 8, 1 0, 1 1 , 1 3-1 4, 1 7, 1 8 and 20 are rejected under 35 
U.S.C. 102(e) as being anticipated by Bialick et al. United States Letters Patent No. 
6,088,802. 

As per claim 1: 

Bialick et al. teach a portable device comprising: 
a microprocessor; and (Figure 8, item 801) 

a non-volatile memory coupled to the microprocessor; (Col. 16; lines 10-11; the 
first memory device can be a non-volatile data storage device which can be used to 
store computer programs and persistent data.) and 

a biometrics-based authentication module coupled to and controlled by the 
microprocessor (Col. 5; lines 1-2; the peripheral device also provides the capability to 
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accept biometric input to enable user authentication to the host computing device), 
wherein access to the non-volatile memory is granted to a user provided that the 
biometrics-based authentication module authenticates the user's identity and wherein 
access to the non-volatile memory is denied to the user otherwise. (Col. 14; lines 50- 
52; user authentication is made in order to grant or deny access to the host computer 
depending the result of the comparison) 
As per claim 2: 

The rejection of claim 1 is incorporated and further Bialick et al. disclose the 
biometrics-based authentication module is a fingerprint authentication module. (Col. 14, 
lines 26-28; a sensor for sensing the fingerprint of the finger, the content of the sensed 
fingerprint being converted into digital data by the device.) 
As per claim 4: 

The rejection of claim 1 is incorporated and further Bialick et al. disclose the 
biometrics-based authentication module comprises a biometrics sensor fitted on one 
surface of the portable device. (Col. 14, lines 48-49; a peripheral device includes a 
biometric device which includes a sensor for sensing the fingerprint) 
As per claim 5: 

The rejection of claim 1 is incorporated and further Bialick et al. disclose a non- 
volatile memory capable or storing biometrics information usable for authentication. 
(Figure 8, item 803; Col. 16; lines 10-11; the first memory device can be a non-volatile 
data storage device which can be used to store computer programs and persistent 
data.) 
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As per claim 7: 

Bialick et al. disclose a portable device comprising: 
a bus; (Figure 6, item 609) 

a microprocessor coupled to the bus; (Figure 8, item 801) 

a non-volatile memory coupled to the bus (Col. 16; lines 10-11; the first memory 
device can be a non-volatile data storage device which can be used to store computer 
programs and persistent data.); and 

a biometrics-based authentication module coupled to the bus, wherein under the 
control of the microprocessor the biometrics-based authentication module is configured 
to (1) capture a first biometrics marker; (Col. 14, lines 55-56; an appropriate library of 
biometric data representing a predetermined group of people; which indicates obtaining 
the biometrics of authorized users the first time) (2) store the first biometrics marker in 
the non-volatile memory; (Col. 14; lines 57-58; the library data can be stored in a 
memory device of the peripheral device) (3) capture a second biometrics marker; 
(Col. 14; line 54; obtain biometric data from a user) and (4) determine whether the 
second biometrics marker can be authenticated against the first biometrics marker; and 
wherein microprocessor is configured to disable access to the non-volatile memory 
upon a determination of authentication failure by the biometrics-based authentication 
module. (Col. 14; lines 50-52; user authentication is made in order to grant or deny 
access to the host computer depending the result of the comparison) 
As per claim 8: 
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The rejection of claim 7 is incorporated and further Bialick et al. disclose the 
biometrics-based authentication module is a fingerprint authentication module. (Col. 14, 
lines 26-28; a sensor for sensing the fingerprint of the finger, the content of the sensed 
fingerprint being converted into digital data by the device.) 
As per claim 10: 

The rejection of claim 7 is incorporated and further Bialick et al. disclose the 
biometrics-based authentication module is structurally integrated with the portable 
device in a unitary construction and comprises a biometrics sensor being disposed on 
one surface of the portable device. (Col. 14, lines 48-49; a peripheral device includes a 
biometric device which includes a sensor for sensing the fingerprint) 
As per claim 11: 

The rejection of claim 7 is incorporated and further Bialick et al. disclose a 
portable device, wherein the non-volatile memory comprises flash memory. (Figure 8, 
item 803) 
As per claim 13: 

The rejection of claim 7 is incorporated and further Bialick et al. disclose a 
portable device, wherein the microprocessor is configured to direct the biometrics-based 
authentication module to capture and store the first biometrics marker provided that no 
biometrics marker has been stored in the non-volatile memory. (Col. 14, lines 55-56; an 
appropriate library of biometric data representing a predetermined group of people; 
which indicates obtaining the biometrics of authorized users the first time) 
As per claim 14: 
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The rejection of claim 7 is incorporated and further Bialick et al. disclose a 
portable device, wherein the microprocessor is configured to enable access to the non- 
volatile memory upon a determination of authentication success by the biometrics- 
based authentication module. (Col. 14; lines 50-52; biometric user authentication to a 
host computing device is made before allowing access to particular data stored on the 
host computing device.) 
As per claim 17: 

Bialick et al. teach a biometrics-based authentication method implemented using 
a portable device, the method comprising the steps of: (a) obtaining a first biometrics 
marker from a user with a biometrics sensor installed on the portable device; (Col. 14; 
line 54; obtain biometric data from a user) (b) retrieving a registered biometrics marker 
from a non-volatile memory of the portable device, the registered biometrics marker 
having been stored therein during a registration process; (Col. 14; lines 57-58; the 
library data can be stored in a memory device of the peripheral device; the stored 
biometrics has to be retrieved in order to compare it with the newly obtained biometrics) 
(c) comparing the first biometrics marker against the registered biometrics marker; (Col. 
14; lines 54-56; comparing the biometric data to an appropriate library of biometric data 
representing a predetermined group of people.) (d) denying the user access to the non- 
volatile memory provided that a match is not identified in said step (c); (Col. 14; lines 
50-52; biometric user authentication to a host computing device is made before allowing 
access to particular data stored on the host computing device, the user authentication is 
made in order to grant or deny access to the host computer depending the result of the 
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comparison) (e) signaling an authentication success provided that a match is identified 
in said step (c). (Col. 14; lines 50-52; user authentication is made in order to grant or 
deny access to the host computer depending the result of the comparison) 
As per claim 18: 

The rejection of claim 17 is incorporated and further Bialick et al. disclose 
biometrics-based access control method, wherein the registered biometrics marker is a 
fingerprint. (Col. 14, lines 26-28; a sensor for sensing the fingerprint of the finger, the 
content of the sensed fingerprint being converted into digital data by the device.) 
As per claim 20: 

The rejection of claim 17 is incorporated and further Bialick et al. disclose the 
step of denying the user access to the restricted resource provided that a match is not 
identified in said step (c). (Col. 14; lines 50-52; biometric user authentication to a host 
computing device is made before allowing access to particular data stored on the host 
computing device, the user authentication is made in order to grant or deny access to 
the host computer depending the result of the comparison) 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed 
or described as set forth in section 1 02 of this title, if the differences between the 
subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. 
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Patentability shall not be negatived by the manner in which the invention was 
made. 

This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 

8. Claims 6, 12, 16, 19 and 22 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Bialick et al. United States Letters Patent No. 6,088,802. 
As per claim 6: 

Bialick et al. teach all the subject matter as described above. Bialick et al. further 
disclose the peripheral device driver can be implemented so that the user must 
successfully enter an acceptable access code (e.g., a password or PIN) before the user 
is enabled to use the peripheral device. (Col. 10; lines 45-47) Not explicitly disclosed by 
Bialick et al. is that, the microprocessor is configured to provide a bypass mechanism 
for authentication upon a determination of authentication failure by the biometrics-based 
authentication module. However, it would have been obvious to a person having 
ordinary skill in the art at the time the invention was made to modify Bialick et al.'s 
method to include a microprocessor that is configured to provide a bypass mechanism 
for authentication upon a determination of authentication failure by the biometrics-based 
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authentication module. This modification would have been obvious because a person 
having ordinary skill in the art would have been motivated to do so by the suggestion 
provided by Bialick et aL, in order to use the security functionality, thus enabling a layer 
of security that protects the integrity of the restricted resources. 
As per claim 12: 

Bialick et al. teach all the subject matter as described above. Bialick et al. further 
disclose the peripheral device further configured to encrypt the first biometrics marker 
before storing the first biometrics marker in the non-volatile memory. 

However, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Bialick et al.'s method to include further 
configured to encrypt the first biometrics marker before storing the first biometrics 
marker in the non-volatile memory. This modification would have been obvious 
because a person having ordinary skill in the art would have been motivated to do so by 
the suggestion provided by Bialick et al., in order to enhance the security of the 
biometrics-based access control method. 
As per claim 16: 

Bialick et al. teach all the subject matter as described above. Bialick et al. further 
disclose the peripheral device driver can be implemented so that the user must 
successfully enter an acceptable access code (e.g., a password or PIN) before the user 
is enabled to use the peripheral device. (Col. 10; lines 45-47) Not explicitly disclosed by 
Bialick et al. is that, a bypass mechanism for authentication is provided upon a 
determination of authentication failure by the biometrics-based authentication module. 
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However, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Bialick et al.'s method to include a bypass 
mechanism for authentication is provided upon a determination of authentication failure 
by the biometrics-based authentication module. This modification would have been 
obvious because a person having ordinary skill in the art would have been motivated to 
do so by the suggestion provided by Bialick et al., in order to use the security 
functionality, thus enabling a layer of security that protects the integrity of the restricted 
resources. 
As per claim 19: 

Bialick et al. teach all the subject matter as described above. Bialick et al. further 
disclose the peripheral device can be used to encrypt or decrypt data stored. Not 
explicitly disclosed by Bialick et al. is that, the registered biometrics marker is stored in 
an encrypted format. 

However, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Bialick et al.'s method to include the 
registered biometrics marker is stored in an encrypted format. This modification would 
have been obvious because a person having ordinary skill in the art would have been 
motivated to do so by the suggestion provided by Bialick et al., in order to enhance the 
security of the biometrics-based access control method. 
As per claim 22: 

Bialick et al. teach all the subject matter as described above. Bialick et al. further 
disclose the peripheral device driver can be implemented so that the user must 
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successfully enter an acceptable access code (e.g., a password or PIN) before the user 
is enabled to use the peripheral device. (Col. 10; lines 45-47) Not explicitly disclosed by 
Bialick et al. is that, providing the user with a bypass authentication procedure provided 
that a match is not identified in said step (c). 

However, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Bialick et al.'s method to include providing 
the user with a bypass authentication procedure provided that a match is not identified 
in said step (c). This modification would have been obvious because a person having 
ordinary skill in the art would have been motivated to do so by the suggestion provided 
by Bialick et al., in order to use the security functionality, thus enabling a layer of 
security that protects the integrity of the restricted resources. 

9. Claims 3 and 9 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bialick et al. United States Letters Patent No. 6,088,802 and in view of Bjorn United 
States Letters Patent No. 6,799,275 . 
As per claim 3: 

Bialick et al. teach all the subject matter as described above. In addition, Bialick 
et al. disclose a communication interfaces, such as a smart card interface, a serial 
interface or a SCSI interface or an IDE interface. Not explicitly disclosed by Bialick et al. 
is that the portable device, further comprising a universal serial bus (USB) connector for 
coupling with another USB-compliant device. 

Bjorn in analogous art, however, teaches a device further comprising a universal 
serial bus (USB) connector for coupling with another USB-compliant device. (Col. 2, 
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lines 59-60; the digital connection is a data bus, which conforms to a universal serial 
bus (USB) standard.) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the method disclosed by Bialick et al. to 
include a device further comprising a universal serial bus (USB) connector for coupling 
with another USB-compliant device. This modification would have been obvious 
because a person having ordinary skill in the art would have been motivated to do so, 
as suggested by Bjorn, in order to provide a faster transfer of digitized image. 
As per claim 9: 

Bialick et al. teach all the subject matter as described above. In addition, Bialick 
et al. disclose a communication interfaces, such as a smart card interface, a serial 
interface or a SCSI interface or an IDE interface. Not explicitly disclosed by Bialick et al. 
the portable device comprising a universal serial bus (USB) device controller coupled to 
the bus and a USB connector coupled to the bus, such that the portable device is 
capable of communicating with a host platform via the USB connector. 

Bjorn in analogous art, however, teaches a device comprising a universal serial 
bus (USB) device controller coupled to the bus and a USB connector coupled to the 
bus, such that the portable device is capable of communicating with a host platform via 
the USB connector. (Col. 2, lines 59-60; the digital connection is a data bus, which 
conforms to a universal serial bus (USB) standard.) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the method disclosed by Bialick et al. to 
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include a device comprising a universal serial bus (USB) device controller coupled to 
the bus and a USB connector coupled to the bus, such that the portable device is 
capable of communicating with a host platform via the USB connector. This modification 
would have been obvious because a person having ordinary skill in the art would have 
been motivated to do so, as suggested by Bjorn, in order to provide a faster transfer of 
digitized image. 

10. Claims 23-24 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bialick et al. United States Letters Patent No. 6,088,802 and in view of Estakhri et al. 
(hereinafter Estakhri) United States Letters Patent No. 6,385,667. 
As per claim 23: 

Bialick teaches a unitary portable data storage device having biometrics 
capability the device comprising: 
housing; (Figure 3a) 

a fingerprint module, at least a portion of which is housed within the housing, the 
fingerprint module including a sensor disposed on an exterior surface of the housing; 
(Col. 14, lines 21-35) 

a memory including non-volatile memory, the memory housed within the housing 
and coupled to the fingerprint module and is configured to store at least one fingerprint 
template as well as user data; (Col. 14; lines 10-11 and lines 57-58) 

a memory controller housed within the housing and coupled to the memory, the 
memory controller controlling access to the memory; (Figure 8, item 801) 
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wherein the fingerprint module is configured to (1) receive a fingerprint sample 
from a user placing a finger on the sensor; (Col. 14, lines 55-56; an appropriate library 
of biometric data representing a predetermined group of people; which indicates 
obtaining the biometrics of authorized users the first time) (2) compare the fingerprint 
sample with said at least one finger template; (Col. 14; lines 50-52; biometric user 
authentication to a host computing device is made before allowing access to particular 
data stored on the host computing device.) and (3) reject a request from the user to 
access the user data stored in the memory provided that the comparison in said step (2) 
results in no match. (Col. 14; lines 50-52; user authentication is made in order to grant 
or deny access to the host computer depending the result of the comparison) 

In addition, Bialick et al. disclose a communication interfaces, such as a smart 
card interface, a serial interface or a SCSI interface or an IDE interface. Not explicitly 
disclosed by Bialick et al. a USB plug integrated into the housing without an intervening 
cable and capable of coupling the unitary portable data storage device directly to a USB 
socket on a host computer and a USB device controller housed within the housing, the 
USB device controller enabling the unitary portable data storage device to communicate 
with the host computer via the USB protocol. 

Estakhri in analogous art, however, teaches a USB plug integrated into the 
housing without an intervening cable and capable of coupling the unitary portable data 
storage device directly to a USB socket on a host computer; (Figure 3, element 300, 
element 314) and a USB device controller housed within the housing, the USB device 
controller enabling the unitary portable data storage device to communicate with the 
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host computer via the USB protocol. (Figure 3, element 300, element 314, element 335, 
element 330; Col. 5, lines 19-51) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the method disclosed by Bialick et al. to 
include a USB plug integrated into the housing without an intervening cable and capable 
of coupling the unitary portable data storage device directly to a USB socket on a host 
computer and a USB device controller housed within the housing, the USB device 
controller enabling the unitary portable data storage device to communicate with the 
host computer via the USB protocol. This modification would have been obvious 
because a person having ordinary skill in the art would have been motivated to do so, 
as suggested by Estakhri, (Col. 1, lines 16-17) in order to provide an interface 
facilitating user-friendly connectivity and a faster transfer of digitized image. 
As per claim 24: 

Bialick and Estakhri disclose all the subject matter as discussed above. In 
addition Estakhri further discloses a device wherein at least a portion of the USB plug 
protrudes from the housing to facilitate direct coupling of the unitary portable data 
storage device to the USB socket of a computer. (Figure 3, item 314) 
1 1 . Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

12. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shewaye Gelagay whose telephone number is 571-272- 
4219. The examiner can normally be reached on 8:00 am to 5:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Albert Decady can be reached on 571-272-3819. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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